selinux_child: workaround fqnames when using DRO
When using domain_resolution_order the username will always be
fully-qualified, what has been causing some SELinux issues as mappings
for user 'admin' are not applied for 'admin@ipa.example'.
In order to work this around we can take advantage that selinux_child
queries SSSD since commit 92addd7ba and call getpwnam() in order to get
the username in the correct format.
seuser_needs_update() signature has been updated due to this change.
Resolves:
https://pagure.io/SSSD/sssd/issue/3740
Signed-off-by: Fabiano FidĂȘncio <fidencio@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>